Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DLlciFdbpgDNeWbRSYHS4u5PUxY.roa
File: DLlciFdbpgDNeWbRSYHS4u5PUxY.roa (raw, json)
Hash identifier: V4zgXFp5GseuVdOv7Xe3NeW52KWmKyoB3Za6ybSp73M=
Subject key identifier: 0C:B9:5C:88:57:5B:A6:00:CD:79:66:D1:49:81:D2:E2:EE:4F:53:16
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CE7EAB680CE64D8936811762469842BFA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DLlciFdbpgDNeWbRSYHS4u5PUxY.roa
Signing time: Mon 08 Jan 2024 07:12:48 +0000
ROA not before: Mon 08 Jan 2024 07:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e7:ea:b6:80:ce:64:d8:93:68:11:76:24:69:84:2b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 8 07:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cb95c88575ba600cd7966d14981d2e2ee4f5316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:b2:fe:e4:34:72:a2:77:e3:eb:14:b9:a1:
3d:68:e7:01:d5:f0:c5:79:5c:db:4c:98:a7:44:b3:
d4:1c:34:3c:03:b4:a4:a1:65:d0:e5:91:91:3e:ad:
9a:f1:c5:10:55:ce:f1:41:af:99:d2:78:28:b4:a6:
13:d6:97:3b:62:8c:72:ef:90:7a:f2:8a:27:62:8d:
9d:bd:d5:f7:99:c9:13:22:f1:77:f4:55:10:62:dd:
10:21:a1:dd:95:41:44:0a:14:51:1e:1e:6f:e9:8e:
4d:f2:fd:39:5b:6e:03:cc:2c:f6:b8:c0:cd:76:1b:
d9:1e:dd:b3:4c:64:08:a7:71:03:7f:28:32:33:32:
73:cc:75:91:bb:47:fc:c2:4d:7a:8d:a8:56:8d:29:
d6:ab:19:c7:4e:9b:f0:a7:79:c2:e5:70:52:b6:51:
74:c9:cf:ee:58:7f:d5:7b:ab:26:d1:25:5d:ac:c0:
fa:99:96:d4:92:c8:6d:b8:47:ff:ca:09:ce:af:fd:
19:f6:37:1c:1e:33:d2:a0:c9:0a:96:a3:ee:1a:5a:
5d:e9:4f:42:0d:48:dd:54:fd:22:a4:88:9b:da:92:
0b:a0:ea:ba:e3:0e:c7:0b:14:ae:5b:c1:ca:98:b8:
3e:7e:43:ab:f4:9e:4e:0d:e1:a4:55:0d:95:6c:7b:
90:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B9:5C:88:57:5B:A6:00:CD:79:66:D1:49:81:D2:E2:EE:4F:53:16
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DLlciFdbpgDNeWbRSYHS4u5PUxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:26:9f:28:9a:3e:2c:9e:86:51:b9:4e:ed:d3:e0:a8:56:c5:
ea:f8:87:3b:4f:ce:56:ff:63:c8:95:8b:7d:8a:76:5f:15:ba:
2b:98:b5:99:c0:6c:5d:ad:f9:29:d3:21:c5:36:2d:70:6f:02:
ca:66:bf:12:10:9f:6b:72:05:92:96:18:d3:9f:a3:3a:4c:f6:
cb:4e:b5:54:80:03:27:ae:69:b1:98:c7:30:33:0e:25:fa:8f:
ff:81:26:df:43:e4:63:be:d9:a5:40:47:1b:50:c7:c8:20:12:
e8:07:bc:11:f6:b3:e2:e0:37:05:a9:e8:9e:37:23:ac:c6:30:
38:be:bb:f9:75:b8:f8:a7:df:54:5f:6b:9f:35:02:b7:3f:4d:
a1:2a:7c:55:87:00:47:3c:82:37:29:a3:ad:9d:b7:50:10:2a:
0e:44:5a:71:b6:33:f1:71:02:48:37:0b:e9:db:f6:cb:e7:c9:
6b:59:dc:90:8b:7e:fa:81:5a:61:93:69:8b:98:9d:1f:98:2d:
74:d7:47:f5:c8:ad:3f:a5:8b:bc:16:18:31:91:1c:c7:2d:ad:
a6:30:f5:dd:8f:85:d2:52:a9:a0:8f:b7:05:b4:e1:41:98:2e:
47:83:01:59:58:a9:30:78:9d:2f:39:7f:ce:97:1c:19:5f:a5:
0c:20:74:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:15:05 2025 by rpki-client